Site not served over HTTPS

HTTPS is the encrypted version of the connection between a visitor's browser and your server; without it, the connection is plain HTTP and everything sent across it is readable in transit. This check looks at whether the site is served over HTTPS at all. On this site, no HTTPS was found, meaning connections happen entirely in plaintext. Without HTTPS, every form submission, session cookie, and page request is readable by anyone positioned on the network path between the visitor and the server, including on shared networks like coffee-shop Wi-Fi, by the visitor's internet provider, or on any public hotspot. Browsers also display a prominent 'Not Secure' warning on every single page until this is fixed, and most modern visitors abandon a site immediately when they see it. Your hosting provider should enable HTTPS, which is typically free and fast today: options include Cloudflare's free tier, Let's Encrypt combined with a server like Caddy, or a one-click TLS option many hosting platforms already offer. This is urgent, roughly 30 minutes of setup, and should be the very first fix addressed given how visible and immediate its effect on visitor trust is.